Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa
File:                     3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa (raw, json)
Hash identifier:          dQQ1gwjEcxl+mnvCzrMVM8qzoOPPRyKshaSs4bhNaKg=
Subject key identifier:   A7:3B:35:1E:6B:B5:4F:C6:CF:9F:B0:61:5A:80:4F:FD:58:B1:B7:79
Certificate issuer:       /CN=7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6
Certificate serial:       505BB1B8535ED1CF34474CCF64E66F9DFC7EAED0
Authority key identifier: 7B:05:BE:01:AF:F0:F9:A0:19:7E:B3:B9:97:EB:AF:C4:EE:02:CF:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa
Signing time:             Wed 15 Oct 2025 13:53:03 +0000
ROA not before:           Wed 15 Oct 2025 13:48:03 +0000
ROA not after:            Wed 14 Oct 2026 13:53:03 +0000
asID:                     271145
IP address blocks:        201.71.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.crl
                          rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5b:b1:b8:53:5e:d1:cf:34:47:4c:cf:64:e6:6f:9d:fc:7e:ae:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6
        Validity
            Not Before: Oct 15 13:48:03 2025 GMT
            Not After : Oct 14 13:53:03 2026 GMT
        Subject: CN=A73B351E6BB54FC6CF9FB0615A804FFD58B1B779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:f5:85:e3:16:06:db:89:19:f7:71:8d:7f:
                    80:bc:be:20:b6:5b:27:06:6d:3b:cf:53:46:ba:00:
                    52:c2:d1:a1:88:e6:7f:84:d3:51:d6:c0:db:19:59:
                    97:74:17:7f:2e:78:18:d3:56:45:92:e3:90:10:e9:
                    6d:72:75:c8:ac:cd:5e:92:13:bc:e0:48:5f:a2:23:
                    f4:24:7c:95:42:de:22:a4:91:c9:1a:76:3f:b1:ed:
                    33:f3:56:9f:3b:fa:3d:0c:12:56:a3:52:d0:cc:72:
                    29:ec:e9:a8:e2:be:0a:84:94:fd:35:d2:47:96:7a:
                    05:0c:83:d4:b9:7f:21:6a:b3:d3:fb:fe:21:cb:9c:
                    72:51:db:f0:a0:15:42:fc:f9:e7:75:ab:b4:30:79:
                    49:6c:04:08:49:86:ba:ca:b8:4c:ff:24:42:74:0d:
                    24:a9:78:7b:83:7e:8b:16:fb:ff:ff:f5:92:7d:c3:
                    8b:8f:bd:76:f2:9f:29:c6:dc:1f:8e:8a:e1:97:9c:
                    db:1e:40:7b:8a:f0:35:0d:c6:52:80:a0:cf:ee:14:
                    b9:46:c3:b5:c9:b7:a7:5e:90:28:74:69:10:20:51:
                    b2:59:5b:93:52:5e:02:b5:39:6d:27:55:a5:d4:c6:
                    b4:f0:a3:07:ca:14:99:b3:ac:7d:cc:aa:4f:81:44:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3B:35:1E:6B:B5:4F:C6:CF:9F:B0:61:5A:80:4F:FD:58:B1:B7:79
            X509v3 Authority Key Identifier:
                keyid:7B:05:BE:01:AF:F0:F9:A0:19:7E:B3:B9:97:EB:AF:C4:EE:02:CF:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/3230312e37312e3231362e302f32322d3332203d3e20323731313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:c5:04:77:d8:12:d6:a0:40:35:77:0a:9b:56:39:bd:6c:77:
         c3:b0:73:46:4b:fc:84:83:c9:57:30:fe:4e:bc:e4:dc:37:f3:
         c4:6d:1f:35:6f:67:fc:a0:ef:69:6f:af:78:91:fe:0c:e8:e0:
         da:e9:cc:e8:c0:0b:c7:fa:70:06:8d:c5:e8:55:98:a9:f1:bb:
         20:ef:bf:fc:23:84:b3:78:16:68:77:4f:33:8b:d2:de:32:e3:
         00:63:e4:d5:0b:b9:89:17:4e:f8:c9:a1:a7:44:e2:86:4e:d4:
         e4:35:d2:41:a1:41:41:35:4a:b3:c3:0d:c3:2f:af:05:63:33:
         a4:cf:5c:86:c0:98:32:4a:12:4a:01:01:f0:18:65:e1:c8:2d:
         fe:e6:74:b3:24:33:a7:21:07:4a:57:8d:c0:c3:fd:b6:de:a8:
         33:7b:bf:b2:5a:f7:9c:84:d3:e2:f4:89:a2:7e:3d:da:e5:c2:
         51:34:35:12:71:a9:37:18:3d:c2:30:fa:70:c5:a1:22:4f:95:
         26:dd:ac:9e:d4:2b:2a:6c:99:03:62:cf:1d:7f:bf:99:8c:3f:
         29:b3:1f:9d:2a:2a:be:c6:16:4c:65:77:c9:7c:23:d9:ce:e5:
         4f:7c:ba:e9:d8:20:f4:c5:4f:10:47:72:e5:9f:e2:66:57:12:
         e4:ec:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:57:29 2025 by rpki-client